Cloud Security & Authorization Technical Analyst
Core
Technical authority for securing, engineering, and independently assessing federal cloud environments to ensure compliance with security and risk requirements.
Role type
Senior IC cloud security engineer (A&A & IV&V)
Builds
FedRAMP authorized cloud platforms for federal agencies
Domain
Federal government / Cloud Security & Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cloud security engineering, Assessment & Authorization (A&A), Independent Verification & Validation (IV&V), NIST RMF, FedRAMP compliance, Security Assessment Report (SAR) development, Risk management, Control implementation validation, Shared responsibility models, RMF artifact development
Preferred skills
AWS/Azure/GCP FedRAMP experience, 3PAO experience, CISSP/CCSP certification, CI/CD pipeline assessment, Zero Trust architecture, GRC platforms
Technologies
AWS, Azure, GCP, NIST SP 800-53, ServiceNow, eCase
Responsibilities
Provide technical cloud security leadership for A&A activities across IaaS, PaaS, and SaaS environments; Perform detailed technical reviews of cloud architectures and security control implementations; Support and execute independent assessment or IV&V activities including readiness reviews and SAR development; Analyze Cloud Service Provider (CSP) FedRAMP packages and advise on control inheritance and residual risk; Develop and review RMF artifacts including SSPs, control implementation matrices, and risk acceptance documentation; Conduct interviews and technical walkthroughs with system engineers, ISSOs, and CSPs; Support third party assessment (3PAO) coordination and provide technical quality assurance; Advise stakeholders on secure cloud design, compensating controls, and remediation strategies; Support IT audit and IV&V activities related to evidence validation and findings remediation; Contribute to cloud security standards, SOPs, and reusable authorization patterns.
Seniority
Senior, hands-on IC
